Is there a workaround for avoiding the 30-day violation after exceeding permitted volume usage on Enterprise trial?

[HQ5452]

Hi,

There are three days between the end of my trial and the moment I change my stack from "Splunk Enterprise" to "Splunk Free". During this three days, allowed permitted volume was 0GB, so I exceeded the "5 violations in a rolling 30 day window" permitted.

Is it possible to ignore (or something else) this three days of violation, and allow me to use my Splunk again without having to delay the 30 day window?

Thanks for your help,

JB

[SplunkersRock]

refer this

https://answers.splunk.com/answers/36194/alert-on-license-usage.html

[HQ5452]

I didn't want to create an alert on license usage.
Anyway I installed a new instance but i lose indexed data.